Approved changes feed: RSS · Atom

cpe:2.3:a:xarrow:xarrow_scada:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorXarrow (7ff77dd0-1c15-5c5f-9c5c-f4adbae9c2d8)
ProductXarrow Scada (1bf08e96-93e7-5918-9ef3-2e8d921a6bea)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-33025 vulnerable 2026-06-08 05:32:08.528481 xArrow SCADA Path Traversal
MEDIUM (5.6)
xArrow SCADA versions 7.2 and prior permits unvalidated registry keys to be run with application-level privileges.
Published: 2022-05-16T17:53:33.333Z
Updated: 2025-04-16T16:20:53.298Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33021 vulnerable 2026-06-08 05:32:08.523059 xArrow SCADA Cross-site Scripting
MEDIUM (6.1)
xArrow SCADA versions 7.2 and prior is vulnerable to cross-site scripting due to parameter ‘edate’ of the resource xhisalarm.htm, which may allow an unauthorized attacker to execute arbitrary code.
Published: 2022-05-16T17:53:01.000Z
Updated: 2025-04-16T16:21:01.016Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33001 vulnerable 2026-06-08 05:32:08.450259 xArrow SCADA Cross-site Scripting
MEDIUM (6.1)
xArrow SCADA versions 7.2 and prior is vulnerable to cross-site scripting due to parameter ‘bdate’ of the resource xhisvalue.htm, which may allow an unauthorized attacker to execute arbitrary code.
Published: 2022-05-16T17:52:30.861Z
Updated: 2025-04-16T16:21:09.406Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.